Users do not have to click or download anything to become infected, merely visiting an infected website is sufficient.

用户不需要去点击或下载任何东西，单单浏览受感染的网站就可以受到攻击。